Daily Writeups
@Daily_Writeups
4.01K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.01K subscribers
Daily Writeups
⤷ Title: Beyond Reflection: Eliminating False Positives in Cross-Site Scripting (XSS) with Context-Aware…
════════════════════════
𐀪 Author: Pratik Khairnar
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 13:31:01 GMT
════════════════════════
⌗ Tags: #web_security #bug_bounty #penetration_testing #application_security #cybersecurity
Medium
Beyond Reflection: Eliminating False Positives in Cross-Site Scripting (XSS) with Context-Aware Lexing, WHATWG Finite Automata…
A mathematical, algorithmic, and architectural deep dive into why naive scanners drown in false positives, how HTML5 state machine parsing…
9 views
Daily Writeups
⤷ Title: How I Found a Bug Bounty Vulnerability That Let Me Remove Other Users’ Access
════════════════════════
𐀪 Author: Ashour0x
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 13:18:12 GMT
════════════════════════
⌗ Tags: #web_security #cybersecurity #penetration_testing #bug_bounty #application_security
Medium
The Server Said No. So I Changed the Question.
How I found my first resolved vulnerability after duplicates and informative reports.
10 views
Daily Writeups
⤷ Title: How to Build a Web App Security Testing Program That Actually Holds
════════════════════════
𐀪 Author: Invadel
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 13:34:46 GMT
════════════════════════
⌗ Tags: #cybersecurity #software_development #application_security #devsecops #web_security
Medium
How to Build a Web App Security Testing Program That Actually Holds
A practitioner’s walk through SAST, DAST, manual pentesting and the OWASP checklist, and how to layer them so gaps don’t line up.
12 views
Daily Writeups
⤷ Title: OWASP Top 10 for LLM Applications — Revised Write-up
════════════════════════
𐀪 Author: Mohamed Algabry
════════════════════════
ⴵ Time: Tue, 13 Oct 2026 17:50:38 GMT
════════════════════════
⌗ Tags: #cybersecurity #bug_bounty #llm #web_security #prompt_injection_attack
Medium
OWASP Top 10 for LLM Applications — Revised Write-up
Introduction
12 views
Daily Writeups
⤷ Title: TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 00:31:16 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_102989 #npm #React #Reflected XSS #TanStack #TanStack Start #Web Security
Daily CyberSecurity
TanStack CVE-2026-102989 (CVSS 9.3) Reflected XSS Hits Ecosystem With 98M Monthly Downloads
TL;DR TanStack has fixed CVE-2026-102989, an unauthenticated reflected XSS flaw rated CVSS 9.3. This TanStack Start vulnerability lets a crafted link run attacker JavaScript on an app’s own …
12 views
Daily Writeups
⤷ Title: Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
════════════════════════
𐀪 Author: Affanhaxor
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 05:01:27 GMT
════════════════════════
⌗ Tags: #bug_bounty #ctf #web_security #sqli #cybersecurity
Medium
Irish-Name-Repo 1 : CTF Write-up | SQL Injection Authentication Bypass
Introduction
10 views
Daily Writeups
⤷ Title: The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
════════════════════════
𐀪 Author: Nikhilvarun
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 10:50:02 GMT
════════════════════════
⌗ Tags: #web_security #ethical_hacking #cybersecurity #owasp_top_10 #access_control
Medium
The Hacker’s Cheat Sheet: OWASP Top 10.(2026)
Websites get hacked every day, and most of the time it’s not some Hollywood genius. It’s a basic mistake: a missing permission check, a…
23 views
Daily Writeups
⤷ Title: Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
════════════════════════
𐀪 Author: Vivek Yadav
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 14:46:10 GMT
════════════════════════
⌗ Tags: #bug_bounty #cybersecurity #authentication_bypass #web_security #ethical_hacking
Medium
Bypassing Login with SQL Injection: PortSwigger Lab Walkthrough.
If you’re going through PortSwigger’s Web Security Academy, the “SQL injection vulnerability allowing login bypass” lab is one of the first…
30 views
Daily Writeups
⤷ Title: Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:43:07 GMT
════════════════════════
⌗ Tags: #cybersecurity #web_security #penetration_testing
Medium
Breaking Point: How Browser Breakpoints Can Unmask Encryption and Compromise Security
Unveiling the Risks of Client-Side Encryption: Insights and Remediation
15 views
Daily Writeups
⤷ Title: Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
════════════════════════
𐀪 Author: Rushikesh
════════════════════════
ⴵ Time: Wed, 14 Oct 2026 13:37:54 GMT
════════════════════════
⌗ Tags: #penetration_testing #secrets #web_security #javascript
Medium
Peeling Back the Layers: Unmasking Hidden Secrets in JavaScript Code
Your JavaScript Has a Secret. Let’s Find Out What It Is.
11 views